Medium
CVE-2026-11866
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
CVE-2026-8379
Frontend File Manager Plugin <= 23.6 - Missing Authorization to Unauthenticated File Download
High
CVE-2026-56057
Uncanny Automator Pro <= 7.3.0.6 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2026-12585
Abandoned Cart Lite for WooCommerce <= 6.8.1 - Unauthenticated Privilege Escalation via Weak Recovery Link
Medium
CVE-2026-12395
Job Portal <= 2.5.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-24547
SiteGround Email Marketing <= 1.7.5 - Missing Authorization
Low
CVE-2026-10753
Site Kit by Google – Analytics, Search Console, AdSense, Speed < 1.176.0 - Missing Authorization to Authenticated (Editor+) Settings Update
High
CVE-2026-56053
EventPrime – Events Calendar, Bookings and Tickets <= 4.3.4.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-56050
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.18 - Missing Authorization
Medium
CVE-2026-57617
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-57431
Featured Image <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2026-56072
Woodmart <= 8.5.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-9709
Cornerstone < 7.8.9 - Missing Authorization
High
CVE-2026-56049
Post Snippets – Custom WordPress Code Snippets Customizer <= 4.0.19 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-57313
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-56067
JetSmartFilters <= 3.8.3 - Unauthenticated SQL Injection
Medium
CVE-2026-56059
Travel Booking <= 2.2.5 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-56044
Blog2Social: Social Media Auto Post & Scheduler <= 8.9.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-56058
Quform - WordPress Form Builder <= 2.23.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-7842
Infility Global < 2.15.20 - Authenticated (Editor+) SQL Injection
High
CVE-2026-56070
Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection
High
CVE-2026-56054
JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2026-10749
Post Duplicator < 3.0.15 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-56048
Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 - Unauthenticated Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.